Webp-sh vulnerabilities
We track 1 vulnerability in Webp-sh products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 22, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Webp-sh vulnerabilities
- 7.5 High severity
webp_server_go: Improper Limitation of a Pathname to a Restricted Directory
WebP Server Go through 0.14.4 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to read files outside the configured IMG_PATH directory by sending requests with percent-encoded backslashes (%5C) that bypass the path.Clean